PT-2023-27055 · Unknown · Theme Volty Cms Brandlist+1
CVE-2023-39651
·
Publicado
2023-10-03
·
Atualizado
2023-10-07
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Theme Volty CMS BrandList module for PrestaShop versions up to 4.0.1
Description
The issue is related to improper neutralization of SQL parameters in the Theme Volty CMS BrandList module for PrestaShop. This allows a guest to perform SQL injection in affected versions.
Recommendations
For versions up to 4.0.1, update to a version later than 4.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the Theme Volty CMS BrandList module until a patch is available.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Prestashop
Theme Volty Cms Brandlist